$ rpki-client -vvf rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft File: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft (raw, json) Hash identifier: EXtjAFPsz2oNRoc+floC0mKSjTwpU0p+YL14Q8tgRZE= Subject key identifier: CD:E2:38:B5:6E:72:6B:B7:D6:81:CE:BC:40:C1:D5:B2:00:31:2F:42 Authority key identifier: 5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F Certificate issuer: /CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Certificate serial: 026E220B6CDFE496066C6FD4EF8F24730BD595D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:09:48 +0000 Manifest this update: Tue 16 Jun 2026 21:04:48 +0000 Manifest next update: Wed 17 Jun 2026 23:50:48 +0000 Files and hashes: 1: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl (hash: 2QSYEpmh8ANPVGlVCc95niwZWssHFGxdNFS6U/LhyXY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6e:22:0b:6c:df:e4:96:06:6c:6f:d4:ef:8f:24:73:0b:d5:95:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Validity Not Before: Jun 16 21:04:48 2026 GMT Not After : Jun 17 23:50:48 2026 GMT Subject: CN=CDE238B56E726BB7D681CEBC40C1D5B200312F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:e6:02:3e:d4:d1:99:3f:73:47:83:9a:53: f7:e0:c7:2e:fc:80:37:9f:41:b7:8c:ae:ef:3a:b1: 58:01:a7:00:95:94:5d:62:21:5f:31:d0:9d:c1:2a: 58:4b:f1:6b:6a:2a:31:97:9a:17:70:96:fc:24:99: 15:ee:93:96:87:51:1b:7c:e6:27:3e:d9:f4:04:20: b3:3f:b1:b7:a5:fe:6e:95:df:1f:70:01:23:45:71: 50:57:0e:9d:ff:ff:8e:1c:ab:0e:61:f6:b9:61:fa: d4:7b:19:96:44:6f:af:f6:bf:23:a2:79:9e:82:ee: 60:97:da:41:fd:b3:d7:14:85:aa:6e:8f:7b:33:2b: 62:5b:88:7e:2c:e0:8c:3c:aa:15:2c:a3:7a:0a:96: ea:64:70:00:03:bc:c1:cb:18:e8:b8:8d:1c:c3:f6: a0:53:7f:1e:80:4a:f4:60:17:6b:fc:20:ff:58:fc: 40:45:da:2e:6e:ce:1c:31:43:8a:f9:4e:08:e4:41: 61:b7:6c:ad:00:24:30:e6:68:57:30:f6:8f:ab:7d: 96:5d:2a:c5:84:5b:2c:dd:02:c2:d5:5c:e4:5a:84: 91:bb:18:59:9a:4c:55:fb:4e:bf:6f:17:00:cc:58: b4:cb:9a:ac:c6:f8:c3:a1:0f:76:d0:71:6d:ea:1e: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E2:38:B5:6E:72:6B:B7:D6:81:CE:BC:40:C1:D5:B2:00:31:2F:42 X509v3 Authority Key Identifier: keyid:5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9f:e7:8f:03:44:73:63:b3:8e:fd:35:7f:65:fb:04:31:2f: d4:af:15:35:93:0e:07:a3:eb:16:47:3b:63:6b:dd:32:9e:a9: b5:ae:e6:03:27:db:dd:3d:c5:aa:c4:ef:5b:17:1f:c0:9b:22: 94:76:9d:ba:9e:a2:78:7e:0b:bc:de:48:02:fc:fa:76:ac:eb: 41:45:64:71:c3:af:fd:5a:06:bb:46:11:1a:57:d7:5b:d9:a3: ad:a6:61:9d:e0:2a:4c:55:ee:6f:ba:64:b2:e8:ce:b6:b5:7d: 35:66:64:69:e7:cc:ba:dc:3f:85:67:6a:a3:1f:b7:81:4f:c5: 47:02:5b:8a:46:d6:f5:58:cc:2c:b7:59:9e:49:cb:e5:0a:84: 26:68:db:24:7c:46:12:ac:b9:9c:e9:7a:d8:16:ea:90:fa:d1: 9e:b2:54:8f:77:df:1e:e3:82:7a:a8:91:45:1e:e7:ce:77:60: da:2f:f2:12:51:ad:0e:0b:08:1b:8b:9b:55:98:ab:96:9d:e7: 86:d2:90:8a:e7:2e:40:4b:43:97:7b:b7:bc:ce:67:4b:e8:6e: 9c:44:3f:0a:ff:73:64:12:87:97:10:89:8e:0e:25:90:10:0a: a6:97:c2:5b:a6:bd:d8:f3:3b:25:2e:3c:1d:65:09:b7:79:64: 14:51:f7:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAm4iC2zf5JYGbG/U748kcwvVldcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUx RjRGMDI2RjAeFw0yNjA2MTYyMTA0NDhaFw0yNjA2MTcyMzUwNDhaMDMxMTAvBgNV BAMTKENERTIzOEI1NkU3MjZCQjdENjgxQ0VCQzQwQzFENUIyMDAzMTJGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9f+YCPtTRmT9zR4OaU/fgxy78 gDefQbeMru86sVgBpwCVlF1iIV8x0J3BKlhL8WtqKjGXmhdwlvwkmRXuk5aHURt8 5ic+2fQEILM/sbel/m6V3x9wASNFcVBXDp3//44cqw5h9rlh+tR7GZZEb6/2vyOi eZ6C7mCX2kH9s9cUhapuj3szK2JbiH4s4Iw8qhUso3oKlupkcAADvMHLGOi4jRzD 9qBTfx6ASvRgF2v8IP9Y/EBF2i5uzhwxQ4r5TgjkQWG3bK0AJDDmaFcw9o+rfZZd KsWEWyzdAsLVXORahJG7GFmaTFX7Tr9vFwDMWLTLmqzG+MOhD3bQcW3qHkNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzeI4tW5ya7fWgc68QMHVsgAxL0IwHwYDVR0j BBgwFoAUXXz6kfvTCbRQX+HWFmL0rh9PAm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhhOGVhN2YtMmY2MS00NDZiLThiNTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFG QkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUxRjRGMDI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdDRkE5MUZCRDMwOUI0NTA1RkUxRDYxNjYyRjRBRTFGNEYw MjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0 QUUxRjRGMDI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaf548DRHNjs479NX9l+wQxL9SvFTWTDgej 6xZHO2Nr3TKeqbWu5gMn2909xarE71sXH8CbIpR2nbqeonh+C7zeSAL8+nas60FF ZHHDr/1aBrtGERpX11vZo62mYZ3gKkxV7m+6ZLLozra1fTVmZGnnzLrcP4VnaqMf t4FPxUcCW4pG1vVYzCy3WZ5Jy+UKhCZo2yR8RhKsuZzpetgW6pD60Z6yVI933x7j gnqokUUe5853YNov8hJRrQ4LCBuLm1WYq5ad54bSkIrnLkBLQ5d7t7zOZ0vobpxE Pwr/c2QSh5cQiY4OJZAQCqaXwlumvdjzOyUuPB1lCbd5ZBRR91k= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:39 2026 by rpki-client